Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa
File:                     3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          gETOQk/RWYGX52pmgmEbVSKsGAvhFhtD+nzK1ypeXfA=
Subject key identifier:   58:14:C4:77:6E:70:86:02:B3:CD:66:E2:E6:09:E4:63:D2:FB:B5:E2
Certificate issuer:       /CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
Certificate serial:       0E0630E1B17CC52A4BD1564BAA1A4FC721B2FB84
Authority key identifier: C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa
Signing time:             Mon 25 Mar 2024 18:00:46 +0000
ROA not before:           Mon 25 Mar 2024 17:55:46 +0000
ROA not after:            Mon 24 Mar 2025 18:00:46 +0000
asID:                     263047
IP address blocks:        191.243.144.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:06:30:e1:b1:7c:c5:2a:4b:d1:56:4b:aa:1a:4f:c7:21:b2:fb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F8774838BF1072B38B7276FB6CD2F3BBFD5645
        Validity
            Not Before: Mar 25 17:55:46 2024 GMT
            Not After : Mar 24 18:00:46 2025 GMT
        Subject: CN=5814C4776E708602B3CD66E2E609E463D2FBB5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:58:25:05:12:9b:fd:07:01:ba:5a:3f:18:
                    e3:89:bf:0c:b7:eb:1c:e4:d8:a3:75:86:a7:7d:c3:
                    56:38:e1:03:9f:aa:6d:ae:33:e3:99:5c:24:4c:0c:
                    86:3b:86:7e:f6:fc:ee:97:2a:a9:fe:7c:21:ae:54:
                    b2:ba:b8:e1:75:8f:6a:42:86:bc:7f:43:fb:32:7c:
                    39:7a:68:43:06:51:48:31:13:40:1e:3b:8f:dc:7c:
                    f7:1e:95:5b:f0:1e:b8:1e:68:c0:42:57:6c:ba:b9:
                    3c:64:a1:7a:dc:fd:89:0a:d9:3c:75:5b:0d:fe:c9:
                    7b:ce:d0:a7:09:3f:58:f7:d0:f0:7c:9a:5e:33:fe:
                    03:43:29:f8:89:e8:2f:6a:df:46:57:64:79:17:35:
                    d1:5b:55:26:28:2b:c1:3e:4a:8c:77:cc:82:20:3e:
                    b5:12:b9:a4:82:c7:94:6e:1c:1e:be:81:c7:1b:c7:
                    dc:31:0d:12:e5:a5:ff:04:7f:22:de:c3:77:62:24:
                    3a:61:27:86:4a:a2:aa:9b:34:e3:aa:ff:14:cc:ad:
                    6b:5c:75:4e:bc:b6:2a:dc:7a:d0:f6:41:fd:46:25:
                    2c:b6:0a:0c:61:72:ee:e1:a3:07:0e:61:28:ad:99:
                    5a:a4:a3:e1:f7:dd:ae:72:96:b4:44:c5:56:01:9e:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:14:C4:77:6E:70:86:02:B3:CD:66:E2:E6:09:E4:63:D2:FB:B5:E2
            X509v3 Authority Key Identifier:
                keyid:C2:F8:77:48:38:BF:10:72:B3:8B:72:76:FB:6C:D2:F3:BB:FD:56:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2F8774838BF1072B38B7276FB6CD2F3BBFD5645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f32302d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:37:f4:ca:22:50:e2:3c:30:2f:ec:af:1c:6f:b1:3a:b7:41:
         d6:cf:37:a6:95:97:dc:f9:75:af:2f:dd:37:aa:48:a1:c1:0d:
         c0:8b:9b:6e:96:85:bc:5b:11:3b:9e:14:d5:e1:0a:9e:f9:c0:
         67:49:09:72:64:ae:c8:35:24:68:c3:98:b4:1b:c8:4d:1c:04:
         bb:b6:fe:56:3a:30:f6:3d:15:90:e1:63:83:b6:ba:5b:c3:59:
         d3:f2:62:27:c9:0e:f9:2d:91:f4:94:b6:75:a4:6b:f3:22:4b:
         19:e5:f0:9f:9b:74:a4:ca:1b:c7:f9:b7:c0:b8:fe:24:21:b4:
         83:dd:92:6e:d0:74:16:fc:a3:a7:68:34:60:4e:af:79:31:22:
         28:ff:aa:e3:02:62:66:24:39:a0:3b:7f:ea:96:b2:11:78:35:
         97:26:cb:22:09:29:1a:49:3e:61:ea:0c:ac:c0:f7:87:55:64:
         8a:ed:d2:d4:80:f9:44:ed:19:48:b0:7a:96:6d:45:b9:a7:ff:
         cf:22:d2:a3:0c:fb:cf:08:56:e3:44:f8:01:30:82:a1:eb:86:
         4a:7d:7c:d8:d7:6c:b4:d9:29:7d:73:1b:f2:a4:07:1e:ba:93:
         d6:44:21:ee:1b:a0:d4:23:35:89:93:cc:09:5f:d7:f5:58:c3:
         65:9f:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----